Merge branch 'minio-4.4.25' into 'master'

Update Minio to 4.4.25 and cleanup secrets

Closes platform-one/big-bang/apps/application-utilities/minio#27

See merge request platform-one/big-bang/bigbang!1952

chart/templates/minio/minio/secret.yaml

-{{- if .Values.addons.minio.enabled }}
-# probably want to get rid of this eventually
-apiVersion: v1
-kind: Secret
-metadata:
-  name: minio-root-creds-secret
-  namespace: minio
-type: Opaque
-data:
-  accesskey: {{ .Values.addons.minio.accesskey | default "minio" | b64enc }}
-  secretkey: {{ .Values.addons.minio.secretkey | default "minio123" | b64enc }}
-{{- end }}
\ No newline at end of file

chart/templates/minio/minio/values.yaml

@@ -22,8 +22,6 @@ annotations:
   {{ include "istioAnnotation" . }}
 {{- end }}
 
-minioRootCreds: minio-root-creds-secret
-
 monitoring:
   enabled: {{ .Values.monitoring.enabled }}
 
@@ -40,14 +38,15 @@ podAnnotations:
   traffic.sidecar.istio.io/includeInboundPorts: "*"
   traffic.sidecar.istio.io/excludeInboundPorts: "9443"
 
-tenants:
+secrets:
+  accessKey: {{ .Values.addons.minio.accesskey | default "minio" }}
+  secretKey: {{ .Values.addons.minio.secretkey | default "minio123" }}
+
+tenant:
   image:
     pullPolicy: {{ .Values.imagePullPolicy }}
   imagePullSecret:
     name: private-registry
-  secrets:
-    accessKey: {{ .Values.addons.minio.accesskey | default "minio" }}
-    secretKey: {{ .Values.addons.minio.secretkey | default "minio123" }}
   {{- if .Values.monitoring.enabled }}
   prometheusOperator: true
   {{- end }}    

chart/values.yaml

@@ -790,7 +790,7 @@ addons:
     git:
       repo: https://repo1.dso.mil/platform-one/big-bang/apps/application-utilities/minio.git
       path: "./chart"
-      tag: "4.4.16-bb.0"
+      tag: "4.4.25-bb.0"
 
     # -- Flux reconciliation overrides specifically for the Minio Package
     flux: {}

docs/understanding-bigbang/package-architecture/minio/Architecture.md

@@ -81,7 +81,7 @@ No current SSO is avaiable via Keycloak.
 
 ## Configuring access to Minio without SSO
 
-Initial access to the MinIO server is via the minioRootCreds. These can be auto generated for you by adding the accesskey and secret key in your Big Bang config.
+Initial access to the MinIO server is via the accessKey and secretKey values in the top level values file.
 
 ```
 addons:

tests/rke2-test-values.yaml

@@ -389,7 +389,7 @@ addons:
 
   minio:
     values:
-      tenants:
+      tenant:
         pools:
         - servers: 2
           volumesPerServer: 4
@@ -450,4 +450,4 @@ addons:
           cpu: 100m
           memory: 256Mi
         limits: null
-        
\ No newline at end of file
+        

tests/test-values.yaml

@@ -173,6 +173,7 @@ gatekeeper:
           - logging/logging-cypress-test
           - tempo/tempo-cypress-test
           - argocd/argo-cd-cypress-test
+          - minio/minio-instance-cypress-test
           # Allow kyverno test vectors for Helm test
           - default/restrict-host-path-mount-.?
           - default/restrict-host-path-write-.?
@@ -273,6 +274,7 @@ gatekeeper:
           - logging/logging-cypress-test
           - tempo/tempo-cypress-test
           - argocd/argo-cd-cypress-test
+          - minio/minio-instance-cypress-test
           # Allow kyverno test vectors for Helm test
           - default/restrict-host-path-mount-.?
           - default/restrict-host-path-write-.?
@@ -386,6 +388,7 @@ kyvernopolicies:
               - logging
               - tempo
               - argocd
+              - minio
               names:
               - "*-cypress-test*"
         parameters:
@@ -416,6 +419,7 @@ kyvernopolicies:
               - logging
               - tempo
               - argocd
+              - minio
               names:
               - "*-cypress-test*"
         parameters:
@@ -456,6 +460,7 @@ kyvernopolicies:
               - logging
               - tempo
               - argocd
+              - minio
               names:
               - "*-cypress-test*"
       update-image-pull-policy:
@@ -1126,7 +1131,7 @@ addons:
   minio:
     enabled: false
     values:
-      tenants:
+      tenant:
         pools:
         - servers: 2
           volumesPerServer: 4